| Next revision | Previous revision |
| exim4:validating_dkim [2016/11/30 10:47] – created peter | exim4:validating_dkim [2020/07/15 09:30] (current) – external edit 127.0.0.1 |
|---|
| acl_check_dkim: | acl_check_dkim: |
| |
| # Deny failures | # Deny failures |
| deny | deny |
| dkim_status = fail | dkim_status = fail |
| logwrite = DKIM test failed: $dkim_verify_reason | logwrite = DKIM test failed: $dkim_verify_reason |
| add_header = X-DKIM: DKIM test failed: (address=$sender_address domain=$dkim_cur_signer), signature is bad. | add_header = X-DKIM: DKIM test failed: (address=$sender_address domain=$dkim_cur_signer), signature is bad. |
| |
| |
| # Deny invalid signatures | # Deny invalid signatures |
| deny | deny |
| dkim_status = invalid | dkim_status = invalid |
| add_header = X-DKIM: $dkim_cur_signer ($dkim_verify_status); $dkim_verify_reason | add_header = X-DKIM: $dkim_cur_signer ($dkim_verify_status); $dkim_verify_reason |
| logwrite = DKIM test passed (address=$sender_address domain=$dkim_cur_signer), but signature is invalid. | logwrite = DKIM test passed (address=$sender_address domain=$dkim_cur_signer), but signature is invalid. |
| |
| # Accept valid/passed sigs | # Accept valid/passed sigs |
| accept | accept |
| dkim_status = pass | dkim_status = pass |
| logwrite = DKIM test passed | logwrite = DKIM test passed |
| add_header = X-DKIM: DKIM passed: (address=$sender_address domain=$dkim_cur_signer), signature is good. | add_header = X-DKIM: DKIM passed: (address=$sender_address domain=$dkim_cur_signer), signature is good. |
| |
| |
| # And anything else. | # And anything else. |
| accept | accept |
| </file> | </file> |
| | |
| This concludes the configuration of SMTP-time DKIM checking, for exim. | |
| |
| | <WRAP info> |
| | **NOTE**: Incoming emails will have a new header X-DKIM added to them |
| | </WRAP> |
| |
| Restart exim4. | Restart exim4. |
| </code> | </code> |
| |
| As you can see from the snippet incoming emails will have a new header X-DKIM added to them logging the result, but failures will result in SMTP-time rejection, and the logging will only end up in the mailserver logfile (/var/log/exim4/mainlog). | Logging will end up in the mailserver logfile (/var/log/exim4/mainlog). |
| |
| |
